Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/l4lKElWg8jkb3S2y8G5HtpLv_8E.roa
File: l4lKElWg8jkb3S2y8G5HtpLv_8E.roa (raw, json)
Hash identifier: eAlM3UbqMidzWRUNV68Iw9JlOfYfEzuWB2gx059CUzU=
Subject key identifier: 97:89:4A:12:55:A0:F2:39:1B:DD:2D:B2:F0:6E:47:B6:92:EF:FF:C1
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019CE69242D8C4347769664A08B8CFAC3247
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/l4lKElWg8jkb3S2y8G5HtpLv_8E.roa
Signing time: Fri 13 Mar 2026 09:41:10 +0000
ROA not before: Fri 13 Mar 2026 09:41:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200211
IP address blocks: 87.76.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:92:42:d8:c4:34:77:69:66:4a:08:b8:cf:ac:32:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Mar 13 09:41:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97894a1255a0f2391bdd2db2f06e47b692efffc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:71:e2:4e:29:5a:e2:ae:46:72:7d:0d:33:
b4:2b:a6:42:53:42:b4:be:70:10:84:a9:66:b3:48:
90:8b:9c:7f:8c:5e:e9:f4:fa:e9:43:bf:b4:1e:a1:
98:4c:8b:91:cf:17:5b:26:98:74:2c:b5:87:30:b0:
06:f2:86:cc:eb:26:de:0a:fa:48:ac:1a:39:55:20:
88:96:95:d4:ff:44:0e:91:16:ab:86:18:3f:58:6b:
63:b7:51:e2:01:c4:7d:36:b0:d4:2d:e9:1c:22:8a:
80:2c:d2:99:c9:6a:a0:af:1a:89:94:19:cd:f7:77:
9f:42:26:88:e3:78:4c:ec:6b:2b:5d:07:d0:58:58:
9b:a2:ec:94:99:f8:38:18:25:0c:cc:8d:b8:68:ad:
6b:c0:d0:2f:78:d7:a2:16:eb:7e:05:73:20:7b:36:
e0:83:0f:e5:de:e2:d1:ea:02:aa:4b:eb:bd:60:db:
e4:30:58:a1:e6:0d:bf:a6:c3:ef:5b:0e:b0:eb:95:
44:c0:02:83:01:05:60:b0:98:4d:b6:2d:cf:68:7d:
b2:ab:f5:e9:17:26:e4:9f:75:75:b7:be:5e:1a:9a:
c9:c6:39:ce:6a:5e:21:4e:ad:69:6a:04:aa:31:7f:
67:ab:20:36:d0:af:96:f3:dd:f3:d1:34:fa:9e:8c:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:89:4A:12:55:A0:F2:39:1B:DD:2D:B2:F0:6E:47:B6:92:EF:FF:C1
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/l4lKElWg8jkb3S2y8G5HtpLv_8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.200.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f3:9f:4c:fc:e9:0d:e2:93:e2:ff:42:45:54:65:f3:5c:55:
a5:12:f0:14:c6:eb:b4:15:c2:f0:04:1e:33:65:a7:d8:4f:04:
c1:04:0f:ad:6f:b3:1d:3b:b6:bc:9e:46:1b:6d:72:ce:bd:c1:
7b:7e:be:b3:db:d4:65:02:a5:93:8d:e7:fe:30:0a:56:ca:a5:
04:67:84:ea:92:67:e6:ba:31:14:1e:a9:bc:b4:9a:7a:a6:55:
85:55:b8:3c:3a:e6:86:32:a9:b7:74:7c:80:93:fa:bd:39:b4:
0a:17:d6:9c:2e:dd:8c:97:68:c5:cf:4d:1b:74:c2:69:bf:35:
8f:7d:d0:ec:3b:66:d4:ec:08:3c:c9:43:31:e9:46:fa:88:91:
6e:ff:57:1e:2e:53:b9:8a:36:7f:34:63:d5:77:32:26:34:b4:
a4:9e:6f:d8:a8:ad:2c:54:9d:9b:16:b2:c2:47:90:19:0f:da:
fc:30:12:73:5d:5d:67:8b:fd:c4:28:d1:2c:ce:2e:c2:ff:5b:
8d:d0:9c:9a:79:e1:0f:5a:f4:b7:5d:f4:fe:47:f4:f8:4f:b6:
7d:6a:bb:3c:0b:de:3c:57:b6:bd:98:eb:3d:4d:bd:2a:5d:f9:
da:c6:a7:09:64:42:b0:20:44:88:79:50:ad:09:82:9c:74:29:
75:b3:f7:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzmkkLYxDR3aWZKCLjPrDJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwMzEzMDk0MTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Nzg5NGExMjU1YTBmMjM5MWJkZDJkYjJmMDZlNDdiNjkyZWZmZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnopx4k4pWuKuRnJ9DTO0K6ZCU0K0
vnAQhKlms0iQi5x/jF7p9PrpQ7+0HqGYTIuRzxdbJph0LLWHMLAG8obM6ybeCvpI
rBo5VSCIlpXU/0QOkRarhhg/WGtjt1HiAcR9NrDULekcIoqALNKZyWqgrxqJlBnN
93efQiaI43hM7GsrXQfQWFibouyUmfg4GCUMzI24aK1rwNAveNeiFut+BXMgezbg
gw/l3uLR6gKqS+u9YNvkMFih5g2/psPvWw6w65VEwAKDAQVgsJhNti3PaH2yq/Xp
Fybkn3V1t75eGprJxjnOal4hTq1pagSqMX9nqyA20K+W893z0TT6nowXlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJeJShJVoPI5G90tsvBuR7aS7//BMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvbDRsS0VsV2c4amtiM1MyeThHNUh0cEx2XzhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0zIMA0G
CSqGSIb3DQEBCwUAA4IBAQBT859M/OkN4pPi/0JFVGXzXFWlEvAUxuu0FcLwBB4z
ZafYTwTBBA+tb7MdO7a8nkYbbXLOvcF7fr6z29RlAqWTjef+MApWyqUEZ4Tqkmfm
ujEUHqm8tJp6plWFVbg8OuaGMqm3dHyAk/q9ObQKF9acLt2Ml2jFz00bdMJpvzWP
fdDsO2bU7Ag8yUMx6Ub6iJFu/1ceLlO5ijZ/NGPVdzImNLSknm/YqK0sVJ2bFrLC
R5AZD9r8MBJzXV1ni/3EKNEszi7C/1uN0JyaeeEPWvS3XfT+R/T4T7Z9ars8C948
V7a9mOs9Tb0qXfnaxqcJZEKwIESIeVCtCYKcdCl1s/fN
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:45 2026 by rpki-client